Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: ZUrWQHPN+FEjnYW5w7jb2qI9jeMofHAdNrUYue1r6U8=
Subject key identifier: 33:3C:4F:BA:F7:D6:4F:58:C6:7D:95:9C:7D:19:7C:1A:90:07:FA:DE
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 019896DBF66C85BF97E817E53714EBDDAE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 02:00:54 +0000
Manifest this update: Mon 11 Aug 2025 02:00:54 +0000
Manifest next update: Tue 12 Aug 2025 02:00:54 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: 1kVWSBsS2DSzPhzt7QmJz5uiBIwsDq+hP13x0mrbPfI=)
2: Mbm6QXqJoPSY8lmJ2uuYnoixdss.roa (hash: YVUXdFTCHChTHodePJ+65GQKTip7VafzN3LWZ67guNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:f6:6c:85:bf:97:e8:17:e5:37:14:eb:dd:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Aug 11 02:00:54 2025 GMT
Not After : Aug 12 02:00:54 2025 GMT
Subject: CN=333c4fbaf7d64f58c67d959c7d197c1a9007fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:80:54:dc:e3:35:2e:20:9b:22:ed:51:49:
7b:ce:76:d2:02:21:12:c5:25:e6:85:02:f1:25:09:
31:f6:25:21:3f:cb:b9:d4:0a:07:1d:7e:ba:34:88:
1f:cf:50:bd:8f:e9:38:8a:18:92:9d:99:35:d0:00:
e9:0a:19:ca:64:c2:09:f9:79:15:ee:12:f6:f0:d5:
75:45:55:34:62:ae:e8:ce:ad:6f:e1:56:10:cd:1b:
46:c0:1f:cf:cc:45:1f:da:45:06:30:80:6e:85:f3:
71:84:3e:e6:2c:4e:2c:d1:7d:68:cc:85:4a:ba:7d:
4d:62:3c:af:39:69:dc:68:79:59:4b:84:05:02:02:
be:3b:36:c9:0b:4c:09:77:37:aa:93:dd:de:80:41:
cc:53:14:57:07:07:0f:b7:55:c3:87:31:27:8d:15:
14:2d:f1:23:f1:ef:a6:b7:9e:9d:94:55:a1:07:77:
83:82:68:d0:a5:78:eb:a1:c3:d3:d2:6b:d8:d4:38:
cd:b8:20:5d:96:b9:d8:39:9e:2f:46:ae:0c:4b:83:
c4:e2:53:1e:99:66:34:85:d2:23:42:40:ee:bb:10:
bd:79:ef:cd:0c:c9:8b:1b:53:c7:83:6f:12:bf:84:
d6:19:2e:b0:a7:48:22:a6:3f:84:f5:51:87:0b:8a:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:4F:BA:F7:D6:4F:58:C6:7D:95:9C:7D:19:7C:1A:90:07:FA:DE
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:11:f8:1a:9c:f4:c5:b8:2e:5a:ea:f9:d1:ea:46:99:f1:d3:
5b:80:23:7c:bc:a6:36:49:29:92:16:e3:cf:88:5e:93:a2:f8:
00:17:6b:20:0e:07:d8:80:1c:d0:f8:ac:ec:a1:ec:4e:2e:ad:
07:a0:a2:e0:d1:d2:e3:84:fa:50:5c:15:ed:f6:04:b0:71:1d:
ee:54:e7:b9:58:49:0b:fb:52:8c:7a:7f:1f:43:ed:6b:94:88:
95:7e:36:34:7a:03:91:68:60:0f:d6:29:da:fc:7e:58:95:5b:
79:25:41:ec:bf:45:b1:7a:7d:18:66:6c:76:13:f8:07:23:43:
bd:c6:dd:1e:d2:7c:2a:cb:9d:33:88:b3:8e:60:9e:66:d5:c5:
4c:b0:70:1e:54:b9:59:0f:20:ba:c4:c9:d8:d9:e5:06:cb:39:
f5:4c:91:eb:f5:a8:d5:0f:af:18:15:c4:3a:31:97:94:3c:7b:
3a:07:58:be:8c:94:9e:4f:8c:1c:55:dc:d4:af:f2:62:34:d8:
c1:8b:c0:05:bf:cb:8d:a8:7c:86:c3:47:9e:e6:95:02:3c:30:
e8:5a:9e:47:40:70:f4:fd:dc:10:71:ed:a5:37:1e:63:bd:18:
0a:7d:a9:e9:34:d6:16:63:83:74:ac:e1:36:7a:1e:f9:48:da:
cb:d7:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:45 2025 by rpki-client